Integrate selected builds with candidate workflows

docs/consumers/build.md

@@ -60,3 +60,9 @@ An empty target list records the source commit and returns without invoking Go,
 creating the output directory, or running a version check. It does not require a
 main package or binary name. This supports source-only operations without
 silently adding a binary check.
+
+The [`build` command](../cli.md) reads the same build specification from the
+profile and writes a private receipt alongside its artifacts. `check` and
+`publish` run selected builds after their one validation callback using
+temporary output outside the worktree; those candidate checks do not write a
+receipt or leave build files in the repository.